Index: /trunk/src/VBox/GuestHost/OpenGL/state_tracker/state_bufferobject.c
===================================================================
--- /trunk/src/VBox/GuestHost/OpenGL/state_tracker/state_bufferobject.c	(revision 44078)
+++ /trunk/src/VBox/GuestHost/OpenGL/state_tracker/state_bufferobject.c	(revision 44079)
@@ -319,5 +319,5 @@
                 for (j=0; j<CRSTATECLIENT_MAX_VERTEXARRAYS; ++j)
                 {
-                    CRClientPointer *cp = crStateGetClientPointerByIndex(i, &g->client.array);
+                    CRClientPointer *cp = crStateGetClientPointerByIndex(j, &g->client.array);
                     if (obj == cp->buffer)
                     {
@@ -332,5 +332,5 @@
                     for (j=0; j<CRSTATECLIENT_MAX_VERTEXARRAYS; ++j)
                     {
-                        CRClientPointer *cp = crStateGetClientPointerByIndex(i, pArray);
+                        CRClientPointer *cp = crStateGetClientPointerByIndex(j, pArray);
                         if (obj == cp->buffer)
                         {